This policy explains what personal data AY.dev collects, why, and what you can ask us to do with it. We follow Indonesia's Personal Data Protection Law (UU No. 27 Tahun 2022).
1. Who we are
AY.dev, Desa Sebudi, Kec. Selat, Karangasem, Bali 80863. Questions about your data: halo@example.com or WhatsApp +62 812-3456-7890.
2. What we collect
- When you book: name, email, WhatsApp number and country of the contact person; names, nationality and age of everyone in the group; your pickup area and hotel.
- Only if you give it: passport or ID number, health notes, and anything you write in the notes field.
- Payments: amounts, dates and the transfer receipts you upload.
- Messages you send through the contact form, and reviews you write.
- Technical data: your IP address is processed by our hosting provider for security and to block abuse. Your language choice is saved in your browser. We do not use advertising or tracking cookies.
3. Why we use it
- To run your booking: confirm seats, arrange pickup, assign guides and keep in touch about the trip.
- For safety: your guide sees health notes so they can help if something happens on the mountain.
- To check payments and keep the accounting records the law requires.
- To answer your questions and show the reviews you send us.
We only use your data for these purposes. We do not sell it, and we do not send you marketing without asking first.
4. Who sees it
- Our staff, and the guides and drivers on your trip, who only see what they need (names, pickup point, health notes).
- Our hosting provider, Cloudflare, which stores the website data on its servers. These servers may be outside Indonesia.
- Rescue teams, medical services or authorities, in an emergency or when the law requires it.
5. How long we keep it
- Booking and payment records are kept for as long as Indonesian tax and accounting rules require.
- Passport or ID numbers and health notes are deleted within 12 months after your trip.
- Messages from the contact form are deleted after 24 months.
6. How we protect it
- Only staff accounts with a password can open our admin system, and each account only sees what its role needs.
- Passwords are stored encrypted. The website runs over HTTPS. Transfer receipts are stored privately and are never public.
7. Your rights
You can ask us to show you the data we hold about you, correct it, delete it, or stop using it for something you agreed to earlier. Write to halo@example.com or WhatsApp +62 812-3456-7890 and we will reply within 14 days. Some records, such as payment records, may have to be kept by law even if you ask us to delete them.
8. Children
Hikers under 18 must be booked by a parent or guardian, who gives their details on their behalf.
9. Changes
If we change this policy, we update the date at the top of this page.